CVE-2015-0745

2015-05-3014:59:03

CWE-200

[email protected]

web.nvd.nist.gov

cisco

headend system

release

vulnerability

remote attackers

sensitive information

crafted http request

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.4%

JSON

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.

Affected configurations

NVD

Node

ciscoheadend_digital_broadband_delivery_systemMatch-

ciscoheadend_system_releaseMatch2.5

ciscoheadend_system_releaseMatch2.7

ciscoheadend_system_releaseMatch3.2

ciscoheadend_system_releaseMatch3.5

ciscoheadend_system_releaseMatch3.7

ciscoheadend_system_releaseMatchi4.3

CPENameOperatorVersion
cisco:headend_digital_broadband_delivery_systemcisco headend digital broadband delivery systemeq-
cisco:headend_system_releasecisco headend system releaseeq2.5
cisco:headend_system_releasecisco headend system releaseeq2.7
cisco:headend_system_releasecisco headend system releaseeq3.2
cisco:headend_system_releasecisco headend system releaseeq3.5
cisco:headend_system_releasecisco headend system releaseeq3.7
cisco:headend_system_releasecisco headend system releaseeqi4.3

CPE	Name	Operator	Version
cisco:headend_digital_broadband_delivery_system	cisco headend digital broadband delivery system	eq	-
cisco:headend_system_release	cisco headend system release	eq	2.5
cisco:headend_system_release	cisco headend system release	eq	2.7
cisco:headend_system_release	cisco headend system release	eq	3.2
cisco:headend_system_release	cisco headend system release	eq	3.5
cisco:headend_system_release	cisco headend system release	eq	3.7
cisco:headend_system_release	cisco headend system release	eq	i4.3